diff --git a/internal/services/nss/nss.go b/internal/services/nss/nss.go
index 32efdcec7..c832fb54e 100644
--- a/internal/services/nss/nss.go
+++ b/internal/services/nss/nss.go
@@ -49,12 +49,14 @@ func (s Service) GetPasswdByName(ctx context.Context, req *authd.GetPasswdByName
 	}
 
 	if !errors.Is(err, users.NoDataFoundError{}) || !req.GetShouldPreCheck() {
+		log.Debugf(context.Background(), "GetPasswdByName: %v", err)
 		return nil, noDataFoundErrorToGRPCError(err)
 	}
 
 	// If the user is not found in the local cache, we check if it exists in at least one broker.
 	pwent, err := s.userPreCheck(ctx, req.GetName())
 	if err != nil {
+		log.Debugf(context.Background(), "GetPasswdByName: %v", err)
 		return nil, status.Error(codes.NotFound, err.Error())
 	}
 
diff --git a/internal/users/manager.go b/internal/users/manager.go
index 35398122e..5f334fe52 100644
--- a/internal/users/manager.go
+++ b/internal/users/manager.go
@@ -73,6 +73,8 @@ func (m *Manager) Stop() error {
 func (m *Manager) UpdateUser(u UserInfo) (err error) {
 	defer decorate.OnError(&err, "failed to update user %q", u.Name)
 
+	log.Debugf(context.TODO(), "Updating user %q", u.Name)
+
 	if u.Name == "" {
 		return errors.New("empty username")
 	}